Malicious
Malicious

AutoIt Compiled Script
MD5: 86f71d06df21318061ed004e91bd1fac
Size: 727.55 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 86f71d06df21318061ed004e91bd1fac
Sha1 7243f9c1754db2693c6f83d89d687cd00dc27c81
Sha256 061e7c16799ad41c3ca701ec1f4d06c7ad0c1c44e4c9bf4a57fd6eddb2ffa923
Sha384 9ee4853bd3ed44087661e66db979787e5253018f694cd249e7087eaf4fd322db232712ac072ccfbea37ec7dacd1a42fc
Sha512 a30a6be320b471ec6842c8e0861407929d325185a1f8d82510bb69c4f682b55f07d2f19d987c918a6ae3a70fcfa3427d0ce3390b2bf84c01561f59d4238de06a
SSDeep 12288:kz7hU5I5yuNHIgzSFKxWltRohBfSTso93UVBe/H6YrcT9xpAXg50DjOnY38Rwr4M:kf+iN57Gtene3O4/H5ALpAw57+8R85
TLSH E9F423D6B9845660C5543331D83ACEA3493878329E1973764729E62BBCB03C7DEA7B0D
PeID
Microsoft Visual C++ v6.0 DLLPacker=UPX Compresor..Gratuito... www.upx.sourceforge.netUPX -> www.upx.sourceforge.netUPX Modified >> *$igBy Ahmed18UPX v0.89.6 - v1.02 / v1.05 -v1.24 -> Markus & Laszlo (overlay)]UPX v1.25 (Delphi) StubUPX v3.0
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
autAF0.tmp.tok
Malicious
[Cleaned].au3
Malicious
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
.rsrc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
autAF0.tmp.tok
Malicious
[Cleaned].au3
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙